Certbot cannot renew

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
www.eccentric.dk

I ran this command:
certbot renew

It produced this output:


Processing /etc/letsencrypt/renewal/admin.eccentric.dk-0001.conf


Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator apache, Installer apache
Attempting to renew cert (admin.eccentric.dk-0001) from /etc/letsencrypt/renewal/admin.eccentric.dk-0001.conf produced an unexpected error: [Errno 2] No such file or directory: ‘/etc/letsencrypt/accounts/acme-v02.api.letsencrypt.org/directory/cd9cc1f41e51739814071592515e7fea/regr.json’. Skipping.


Processing /etc/letsencrypt/renewal/admin.eccentric.dk.conf


Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator apache, Installer apache
Attempting to renew cert (admin.eccentric.dk) from /etc/letsencrypt/renewal/admin.eccentric.dk.conf produced an unexpected error: [Errno 2] No such file or directory: ‘/etc/letsencrypt/accounts/acme-v02.api.letsencrypt.org/directory/cd9cc1f41e51739814071592515e7fea/regr.json’. Skipping.


Processing /etc/letsencrypt/renewal/cloud.eccentric.dk.conf


Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator apache, Installer apache
Attempting to renew cert (cloud.eccentric.dk) from /etc/letsencrypt/renewal/cloud.eccentric.dk.conf produced an unexpected error: [Errno 2] No such file or directory: ‘/etc/letsencrypt/accounts/acme-v02.api.letsencrypt.org/directory/cd9cc1f41e51739814071592515e7fea/regr.json’. Skipping.


Processing /etc/letsencrypt/renewal/eccentric.dk.conf


Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator apache, Installer apache
Attempting to renew cert (eccentric.dk) from /etc/letsencrypt/renewal/eccentric.dk.conf produced an unexpected error: [Errno 2] No such file or directory: ‘/etc/letsencrypt/accounts/acme-v02.api.letsencrypt.org/directory/cd9cc1f41e51739814071592515e7fea/regr.json’. Skipping.


Processing /etc/letsencrypt/renewal/imap.eccentric.dk.conf


Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator apache, Installer None
Attempting to renew cert (imap.eccentric.dk) from /etc/letsencrypt/renewal/imap.eccentric.dk.conf produced an unexpected error: [Errno 2] No such file or directory: ‘/etc/letsencrypt/accounts/acme-v02.api.letsencrypt.org/directory/cd9cc1f41e51739814071592515e7fea/regr.json’. Skipping.


Processing /etc/letsencrypt/renewal/math.eccentric.dk.conf


Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator apache, Installer apache
Attempting to renew cert (math.eccentric.dk) from /etc/letsencrypt/renewal/math.eccentric.dk.conf produced an unexpected error: [Errno 2] No such file or directory: ‘/etc/letsencrypt/accounts/acme-v02.api.letsencrypt.org/directory/cd9cc1f41e51739814071592515e7fea/regr.json’. Skipping.


Processing /etc/letsencrypt/renewal/www.eccentric.dk.conf


Cert is due for renewal, auto-renewing…
Plugins selected: Authenticator apache, Installer apache
Attempting to renew cert (www.eccentric.dk) from /etc/letsencrypt/renewal/www.eccentric.dk.conf produced an unexpected error: [Errno 2] No such file or directory: ‘/etc/letsencrypt/accounts/acme-v02.api.letsencrypt.org/directory/cd9cc1f41e51739814071592515e7fea/regr.json’. Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/admin.eccentric.dk-0001/fullchain.pem (failure)
/etc/letsencrypt/live/admin.eccentric.dk/fullchain.pem (failure)
/etc/letsencrypt/live/cloud.eccentric.dk/fullchain.pem (failure)
/etc/letsencrypt/live/eccentric.dk/fullchain.pem (failure)
/etc/letsencrypt/live/imap.eccentric.dk/fullchain.pem (failure)
/etc/letsencrypt/live/math.eccentric.dk/fullchain.pem (failure)
/etc/letsencrypt/live/www.eccentric.dk/fullchain.pem (failure)


All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/admin.eccentric.dk-0001/fullchain.pem (failure)
/etc/letsencrypt/live/admin.eccentric.dk/fullchain.pem (failure)
/etc/letsencrypt/live/cloud.eccentric.dk/fullchain.pem (failure)
/etc/letsencrypt/live/eccentric.dk/fullchain.pem (failure)
/etc/letsencrypt/live/imap.eccentric.dk/fullchain.pem (failure)
/etc/letsencrypt/live/math.eccentric.dk/fullchain.pem (failure)
/etc/letsencrypt/live/www.eccentric.dk/fullchain.pem (failure)


7 renew failure(s), 0 parse failure(s)

My web server is (include version):

Name : httpd
Version : 2.4.41
Release : 5.fc30
Architecture : x86_64
Size : 5.0 M
Source : httpd-2.4.41-5.fc30.src.rpm
Repository : @System
From repo : updates
Summary : Apache HTTP Server
URL : https://httpd.apache.org/
License : ASL 2.0
Description : The Apache HTTP Server is a powerful, efficient, and extensible
: web server.

The operating system my web server runs on is (include version):
Fedora Server 30

My hosting provider, if applicable, is:
N/A

I can login to a root shell on my machine (yes or no, or I don’t know):
Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
No

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
certbot 0.39.0

1 Like

Hi @mhle

looks like you have deleted your Letsencrypt account.

So the conf - files have a wrong value -> all renews crash.

First step: Create a new account.

https://certbot.eff.org/docs/using.html

Then you may have to run every domain manual.

Could you provide a bit more information? I get mails from LE to renew my certs so my account is still active?

Looks like you have deleted your account folder. That's a local problem, has nothing to do with the Letsencrypt mails.

Ok thanks - can you explain how to fix the problem?

I would start by listing which certs certbot still thinks it has:
certbot certificates

Then ensure each of the files listed actually exists:
Example file output:
Certificate Path: /etc/letsencrypt/live/my.domain.com/fullchain.pem
Private Key Path: /etc/letsencrypt/live/my.domain.com/privkey.pem
Check with cat|more|less:
cat /etc/letsencrypt/live/my.domain.com/fullchain.pem
cat /etc/letsencrypt/live/my.domain.com/privkey.pem
DO NOT SHOW THE OUTPUT OF THESE FILES HERE - PRIVKEY MUST REMAIN PRIVATE
Whichever files are missing, you can review the corresponding archive folder to see if there exists a previous version and link to that instead.
If there are no existing versions, you best bet is to remove the cert and begin anew.

Can you post the output of “sudo ls -alR /etc/letsencrypt/accounts/”?

If your account files were deleted, how did it happen? Can you restore them from a backup?

If not, it’s possible to register a new account and manually update the renewal configuration files.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.